Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
File:                     Fde1_SspxmhdeuJ2recEtYZscwc.mft (raw, json)
Hash identifier:          /vYJdKVmuYZlsnmfjBCVcgevK1mlsnN1fxJJ4V95CyI=
Subject key identifier:   35:96:A4:FA:4C:1B:CD:F0:9F:C5:2B:0D:39:D8:B5:B4:ED:2E:AE:8C
Authority key identifier: 15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07
Certificate issuer:       /CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307
Certificate serial:       019747E75E1388C123C9483D40AD0C8E1A4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
Manifest number:          0E48
Signing time:             Sat 07 Jun 2025 01:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:34 +0000
Files and hashes:         1: Fde1_SspxmhdeuJ2recEtYZscwc.crl (hash: 7AhSX5496VLiv+nPnU1hiTLtgVao8rPcVgnE5BLEljc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:5e:13:88:c1:23:c9:48:3d:40:ad:0c:8e:1a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15d7b5fd2b29c6685d7ae276ade704b5866c7307
        Validity
            Not Before: Jun  7 01:00:34 2025 GMT
            Not After : Jun  8 01:00:34 2025 GMT
        Subject: CN=3596a4fa4c1bcdf09fc52b0d39d8b5b4ed2eae8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:12:a3:a5:9b:fd:cf:cc:58:fa:57:d9:49:65:
                    0a:06:d1:70:57:38:69:7d:bb:69:cf:40:b0:ac:86:
                    16:32:77:9d:fa:22:4f:f1:26:9d:11:96:e2:51:78:
                    04:7e:3b:69:e7:2b:b3:c6:14:28:17:57:59:f1:8a:
                    3a:d5:3c:08:87:94:c1:8e:05:a6:22:6f:9f:ef:52:
                    56:92:e6:4e:7c:4f:57:a4:71:fc:76:74:b6:2c:2f:
                    21:5b:b3:fb:47:c2:9c:19:57:2d:c6:00:d1:6b:e2:
                    29:ef:1f:bb:4d:5a:da:5a:f7:9e:23:99:3e:02:ac:
                    ed:92:17:14:3e:ca:17:5e:f3:6e:8a:85:70:e2:22:
                    c6:57:24:a5:ee:75:c6:5f:d0:da:ae:cb:f1:80:c9:
                    06:80:f4:8f:70:76:93:98:d9:51:af:22:9d:68:61:
                    ca:66:a0:1c:ff:89:56:64:27:8d:2f:cb:d1:56:a4:
                    6f:ac:d0:b9:21:85:d6:7c:d4:63:e7:fc:0b:74:5b:
                    a5:d6:cf:81:fb:22:84:e7:96:30:a0:a0:d8:aa:ae:
                    25:b5:b4:5d:ba:08:a6:7e:dd:e5:af:7c:2b:83:6b:
                    2f:fb:d9:0d:6b:a7:a4:06:3d:18:38:53:4f:a2:fd:
                    31:1d:3f:f5:b7:d3:69:cb:cb:fe:82:75:19:1f:af:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:96:A4:FA:4C:1B:CD:F0:9F:C5:2B:0D:39:D8:B5:B4:ED:2E:AE:8C
            X509v3 Authority Key Identifier:
                keyid:15:D7:B5:FD:2B:29:C6:68:5D:7A:E2:76:AD:E7:04:B5:86:6C:73:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fde1_SspxmhdeuJ2recEtYZscwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f41864-13dc-4af9-8d0a-9c7167d82f56/1/Fde1_SspxmhdeuJ2recEtYZscwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:05:d7:05:6e:29:90:94:89:9b:6e:ee:c7:8c:e1:f0:f7:06:
         4d:3c:18:8a:a5:71:e3:ff:aa:6d:9e:60:ad:e8:ce:26:83:e4:
         b5:5a:43:86:ad:cc:10:88:06:35:19:8a:81:d3:3b:2b:86:40:
         11:30:ed:ae:5a:98:f5:6f:fb:9f:89:53:14:de:66:7c:1e:90:
         25:f7:8b:e7:fb:72:23:cd:bd:de:19:0f:46:f9:46:82:56:38:
         0f:af:c0:29:f8:9e:5b:c4:1a:1b:ee:8a:67:68:c8:95:52:ca:
         c7:cb:eb:ff:c4:71:3e:be:c8:40:5f:22:8f:8c:2f:54:8e:54:
         c5:c0:c3:40:26:87:61:eb:7e:b2:05:2a:70:61:d0:7d:e5:a6:
         83:aa:6c:3b:96:23:c1:eb:40:36:da:7a:19:f7:22:3a:0e:a0:
         53:5a:04:3a:12:a4:af:7b:08:ae:69:a1:a1:9f:24:cc:56:f9:
         34:62:47:ae:6d:82:5c:c7:e7:2e:cb:bd:2c:1c:be:b3:c8:48:
         1b:05:47:2a:a4:3f:4e:58:54:ff:e7:a7:a9:a5:2f:2b:1b:c2:
         45:f8:7d:47:1e:9a:53:e0:80:96:4f:79:1a:2f:8a:8e:1c:ab:
         1d:26:c8:b7:55:ca:b4:19:e7:4b:ec:e8:82:e0:e4:93:03:5c:
         70:e9:97:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH514TiMEjyUg9QK0MjhpPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZDdiNWZkMmIyOWM2Njg1ZDdhZTI3NmFkZTcwNGI1ODY2
YzczMDcwHhcNMjUwNjA3MDEwMDM0WhcNMjUwNjA4MDEwMDM0WjAzMTEwLwYDVQQD
EygzNTk2YTRmYTRjMWJjZGYwOWZjNTJiMGQzOWQ4YjViNGVkMmVhZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxKjpZv9z8xY+lfZSWUKBtFwVzhp
fbtpz0CwrIYWMned+iJP8SadEZbiUXgEfjtp5yuzxhQoF1dZ8Yo61TwIh5TBjgWm
Im+f71JWkuZOfE9XpHH8dnS2LC8hW7P7R8KcGVctxgDRa+Ip7x+7TVraWveeI5k+
AqztkhcUPsoXXvNuioVw4iLGVySl7nXGX9DarsvxgMkGgPSPcHaTmNlRryKdaGHK
ZqAc/4lWZCeNL8vRVqRvrNC5IYXWfNRj5/wLdFul1s+B+yKE55YwoKDYqq4ltbRd
ugimft3lr3wrg2sv+9kNa6ekBj0YOFNPov0xHT/1t9Npy8v+gnUZH6+oFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWWpPpMG83wn8UrDTnYtbTtLq6MMB8GA1UdIwQY
MBaAFBXXtf0rKcZoXXridq3nBLWGbHMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9mNDE4NjQtMTNkYy00YWY5LThkMGEt
OWM3MTY3ZDgyZjU2LzEvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9mNDE4NjQtMTNkYy00YWY5LThkMGEtOWM3MTY3ZDgyZjU2
LzEvRmRlMV9Tc3B4bWhkZXVKMnJlY0V0WVpzY3djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwXXBW4p
kJSJm27ux4zh8PcGTTwYiqVx4/+qbZ5grejOJoPktVpDhq3MEIgGNRmKgdM7K4ZA
ETDtrlqY9W/7n4lTFN5mfB6QJfeL5/tyI8293hkPRvlGglY4D6/AKfieW8QaG+6K
Z2jIlVLKx8vr/8RxPr7IQF8ij4wvVI5UxcDDQCaHYet+sgUqcGHQfeWmg6psO5Yj
wetANtp6GfciOg6gU1oEOhKkr3sIrmmhoZ8kzFb5NGJHrm2CXMfnLsu9LBy+s8hI
GwVHKqQ/TlhU/+enqaUvKxvCRfh9Rx6aU+CAlk95Gi+KjhyrHSbIt1XKtBnnS+zo
guDkkwNccOmXOA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:22 2025 by rpki-client